$ rpki-client -vvvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft File: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json) Hash identifier: mVCBJkTQmpaRc3/BfIlaPp3Qui3FLGCEaegIQRKRrks= Subject key identifier: 9E:E1:D6:F8:79:37:80:AD:75:DF:CB:62:28:24:D3:A0:A0:5E:90:D9 Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 Certificate issuer: /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Certificate serial: 4ED877FBD4D6018951EDAA3C06AA70BC8C11F197 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 22:26:41 +0000 Manifest this update: Wed 16 Sep 2026 22:21:41 +0000 Manifest next update: Fri 18 Sep 2026 00:14:41 +0000 Files and hashes: 1: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: p6FG03AZK0QJqTc/a2W6wtYlIrfjMCZWVS0zOqMFJD0=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d8:77:fb:d4:d6:01:89:51:ed:aa:3c:06:aa:70:bc:8c:11:f1:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Validity Not Before: Sep 16 22:21:41 2026 GMT Not After : Sep 18 00:14:41 2026 GMT Subject: CN=9EE1D6F8793780AD75DFCB622824D3A0A05E90D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:35:89:4e:b3:60:7d:3f:0b:72:a5:82:8c: d0:4b:ec:bb:5a:ec:12:9e:64:51:30:8e:d3:2e:1c: 80:50:a6:c4:c2:a6:58:b0:a5:e9:91:bd:57:ad:e6: 03:c7:90:69:f9:ec:24:da:0e:31:62:0a:10:f0:d8: 07:01:54:25:9b:da:db:da:66:51:e6:fc:5c:ab:9c: 21:66:46:0e:5a:51:65:8b:6a:6b:e1:ae:51:37:23: 26:cf:45:94:e1:ca:9f:10:db:39:92:c9:3b:bb:34: cb:8a:86:33:31:e7:f3:de:3f:9d:e9:c7:6a:78:95: 1e:c0:0c:ab:03:cf:cb:cb:74:4a:28:4e:ff:f2:e1: af:47:a9:43:9d:91:7f:d2:2a:c0:8c:ef:60:25:30: cc:a4:ac:02:2d:18:6b:75:5d:76:c7:13:de:11:4c: 16:f0:f5:ad:a8:0f:25:23:7e:4e:b5:e5:7d:ff:52: 1d:a8:53:b2:dc:e5:dc:ac:be:62:cd:37:59:9a:8f: 36:08:69:7c:e3:d0:55:c9:bf:c5:ae:2c:bb:41:ab: be:de:2e:b9:25:72:c3:5a:81:75:a3:43:2e:fa:9d: 8b:34:28:12:49:62:e4:2c:35:dd:f3:36:f2:84:9a: 11:c2:98:f8:07:b0:6b:77:8b:ba:4e:a6:60:9e:f5: 8a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E1:D6:F8:79:37:80:AD:75:DF:CB:62:28:24:D3:A0:A0:5E:90:D9 X509v3 Authority Key Identifier: keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ae:73:76:82:65:ab:e3:f6:de:a1:96:89:26:62:b2:69:45: cb:26:ee:da:56:23:1b:ef:07:56:78:57:d2:af:23:60:c4:99: 7a:52:73:74:68:02:4f:be:93:7f:ad:71:2b:84:c4:be:bf:22: b2:6e:0f:3d:fb:e2:eb:05:ec:65:85:ce:17:dd:76:ee:0e:12: 84:81:da:ec:a2:10:bf:87:91:83:ab:0e:ef:12:17:77:8c:c3: 0e:73:ea:90:b8:b0:0d:8a:49:8e:77:84:aa:04:2b:c6:b6:dd: a4:9b:ad:78:e0:1f:5c:07:7a:df:c1:aa:8b:03:bb:e8:35:7e: b6:7f:33:8f:a6:fd:fe:f3:35:d2:d6:db:54:76:91:34:2e:ce: 01:a7:0c:42:6b:bf:d8:3b:43:9a:5f:6e:8f:f2:de:f6:20:46: 6a:c2:c7:87:2e:1b:b0:b6:22:1b:82:08:93:2e:9a:12:97:18: a1:94:a3:1f:fa:eb:fa:a5:e0:0c:19:66:6f:72:61:05:3b:60: 0b:85:d6:3b:3e:45:4f:71:09:09:00:8c:3f:77:5a:a5:6f:09: e0:f2:b4:82:48:3e:b7:50:2a:c8:77:a5:ba:cb:42:e1:9a:c9: 88:7b:ee:dc:a3:a0:0d:ad:d4:65:58:5b:69:a1:a9:7a:2b:d2: 95:f9:b5:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTth3+9TWAYlR7ao8BqpwvIwR8ZcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlE OEY0NEVGODAeFw0yNjA5MTYyMjIxNDFaFw0yNjA5MTgwMDE0NDFaMDMxMTAvBgNV BAMTKDlFRTFENkY4NzkzNzgwQUQ3NURGQ0I2MjI4MjREM0EwQTA1RTkwRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPSjWJTrNgfT8LcqWCjNBL7Lta 7BKeZFEwjtMuHIBQpsTCpliwpemRvVet5gPHkGn57CTaDjFiChDw2AcBVCWb2tva ZlHm/FyrnCFmRg5aUWWLamvhrlE3IybPRZThyp8Q2zmSyTu7NMuKhjMx5/PeP53p x2p4lR7ADKsDz8vLdEooTv/y4a9HqUOdkX/SKsCM72AlMMykrAItGGt1XXbHE94R TBbw9a2oDyUjfk615X3/Uh2oU7Lc5dysvmLNN1majzYIaXzj0FXJv8WuLLtBq77e LrklcsNagXWjQy76nYs0KBJJYuQsNd3zNvKEmhHCmPgHsGt3i7pOpmCe9YpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnuHW+Hk3gK1138tiKCTToKBekNkwHwYDVR0j BBgwFoAUQL7fET7Cjyekc1yBWS8Bqdj0TvgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4MjU5ZDYtMjY1NS00NDE3LWJlYzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEz RUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlEOEY0NEVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MEJFREYxMTNFQzI4RjI3QTQ3MzVDODE1OTJGMDFBOUQ4RjQ0 RUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAx QTlEOEY0NEVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGquc3aCZavj9t6hlokmYrJpRcsm7tpWIxvv B1Z4V9KvI2DEmXpSc3RoAk++k3+tcSuExL6/IrJuDz374usF7GWFzhfddu4OEoSB 2uyiEL+HkYOrDu8SF3eMww5z6pC4sA2KSY53hKoEK8a23aSbrXjgH1wHet/BqosD u+g1frZ/M4+m/f7zNdLW21R2kTQuzgGnDEJrv9g7Q5pfbo/y3vYgRmrCx4cuG7C2 IhuCCJMumhKXGKGUox/66/ql4AwZZm9yYQU7YAuF1js+RU9xCQkAjD93WqVvCeDy tIJIPrdQKsh3pbrLQuGayYh77tyjoA2t1GVYW2mhqXor0pX5tYc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:52:07 2026 by rpki-client